Skip to content

Latest commit

 

History

History
26 lines (20 loc) · 1.08 KB

SERVICE.md

File metadata and controls

26 lines (20 loc) · 1.08 KB

GCP service account creation

  • log in to security tooling GCP project
  • select IAM & Admin, Service Accounts
  • press Create service account
  • enter a name, ID, and description for the service account

  • press Create
  • view the newly created service account in the console

GCP service account configuration for OIDC

  • Open CloudShell
  • Enter:
gcloud iam service-accounts add-iam-policy-binding "[email protected]" --member="principalSet://iam.googleapis.com/projects/PROJECT-NUMBER/locations/global/workloadIdentityPools/github-actions/attribute.repository/YOUR-GITHUB-ORG/domain-protect-gcp-deploy" --role="roles/iam.workloadIdentityUser"
  • view in console at IAM, Service Accounts
  • select Service Account, permissions